October  1988 


Report  No.  STAN-CS-88-1232 


PB96-148259 


Temporal  Logic  Programming  is  Complete  and  Expressive 


by 


Marianne  Baudinet 


I  ta:  16^010 

DisrocuBfi®  UxusBUt^ 


Department  of  Computer  Science 

Stanford  University 
Stanford,  California  94305 


DARPA  INSERT  SHEET 

S'!'  -3  G-AS5  -CAr  ON  Qs  “•♦•S  ^aGc 


REPORT  DOCUMENTATION  PAGE 


la  REPORT  SECURITY  CLASSIFICATION 
unclassified 

’b-  restrictive  MARKINGS  * 

2»  security  CLASSlElCATlON  AUTHORITY 

Approved  for  public  release: 

ZO  DECLASSIFICATION /OOWNGRAOING  SCHEDULE 

Distribution  Unlimited- 

4  sERFORMING  ORGANIZATION  REPORT  NUMBER(S) 

STAN-CS-88-1232 

6a  NAME  OP  PERFORMING  ORGANIZATION 

Computer  Science  Department 

6b  OFFICE  SYMBOL 
(tf  app/icab/t) 

7t.  NAME  OP  MONITORING  ORGANIZATION  " 

6c.  ADDRESS  (Cry.  Sraft.  and  //PCodtl 

Stanford  University 

Stanford,  CA  94305 

7b.  ADDRESS  (Cly,  Sratt,  and  //RCodt) 

8a.  NAME  OP  FUNDING /SPONSORING 
ORGANIZATION 

DARPA 

Bb  OFFICE  SYMBOL 
(if  tppiksbh) 

9.  PROCUREMENT  INSTRUMENT  IDENTIFICATION  NUMBER  '  " 

8c.  ADDRESS  (Gfy,  SUff .  Jnd C<x^> 


10.  SOURCE  OE  FUNDING  NUMIERS 


PROGRAM 

PROilCT 

TASK 

WORK  UNIT 

1400  Wilson  Blvd. 

Arlington,  VA  22209 

ELEMENT  NO. 

NO. 

NO. 

ACCESSION  NO. 

11  TiTLg  (tndud9  S^unty  Ctswfi<stton} 

Temporal  Logic  Programming  is  Complete  and  Expressive 


12  personal  AuThOR(S) 

Marianne  Baudinet 


1 3a  TYPE  OF  REPORT 


16  SUPPIEWENTARY  NOTATION 


13b  TIME  COVERED 
FROM _  TO 


14.  DATE  OF  REPORT  {Yw,  MontfK  O^y)  11$.  PAGE  COUNT 

October  1988  I  14 


COSATI  COOES 


GROUP  SU8-GROUP 


18  SUBJECT  TERMS  (ComiiH/8  if  n^^osry  4nd  fdtnttfy  by  biock  number) 


19  abstract  (Continut  on  r9^9rs0  tf  n^ctxu/y  Mnb  identify  by  6/oclr  numbbf^ 

This  paper  addreasea  semantic  and  expreasiveneaa  »- 
sues  for  temporal  logic  programming  and  in  partic¬ 
ular  for  the  TEMPLOG  language  proposed  by  Abadi 
and  Manna.  Two  equivalent  formulations  of  TEM- 
PLOa*8  declarative  semantics  are  given:  in  terms  of  a 
TTimimjd  Hetbiand  naodel  and  in  terms  of  a  least  fix- 
point.  By  relating  these  semantics  to  TEMPLOG’s  op¬ 
erational  semantics,  we  prove  the  completeness  of  the 
resolution  proof  system  underlying  TEMPLOG  *s  exe¬ 
cution  mechanism.  To  study  templog’s  expressive¬ 
ness,  we  ccMisider  its  propositional  version.  We  show 
how  propositional  TEMPLOG  programs  can  be  trans¬ 
lated  into  a  temporal  fixpoint  calculus  and  prove  that 
they  can  express  essentially  all  regular  properties  of 
sequences. 


20  DISTRIBUTION /AVAILABILITY  OF  ABSTRACT 
□  UNCLASSlFlEO/UNLlMlTEO  □  SAME  AS  RPT 

□  OTIC  USERS 

:u  NAME  OF  RESPONSIBLE  INDIVIDUAL 

00  FORM  1473. 84  mar 


83  APR  fdition  may  bt  used  until  tahaufttd 
All  other  editiont  art  obsoittt. 


21.  ABSTRACT  SECURITY  CLASSIFICATION 


22b.  TELEPHONE  (/nc/wdt  Arts  Cods)  22c  OFFICE  SYMBOL 


11  tMhautttd.  SECURITY  CLASSIFICATION  QP  TmS  PAGE 


Temporal  Logic  Programming  is  Complete  and  Expressive* 


Marianne  Baudinet 
Computer  Science  Department 
Stanford  University 

October  1988 


Abstract 

This  paper  addresses  semantic  and  expressiveness  is¬ 
sues  for  temporal  logic  programming  and  in  partic¬ 
ular  for  the  TEMPLOG  language  proposed  by  Abadi 
and  Manna.  Two  equivalent  formulations  of  TEM¬ 
PLOG ’s  declarative  semantics  aire  given:  in  terms  of  a 
minimal  Herbrand  model  and  in  terms  of  a  least  fix- 
point.  By  relating  these  semantics  to  TEMPLOG ’s  op¬ 
erational  semantics,  we  prove  the  completeness  of  the 
resolution  proof  system  underlying  TEMPLOG ’s  exe¬ 
cution  mechanism.  To  study  TEMPLOG ’s  expressive¬ 
ness,  we  consider  its  propositional  version.  We  show 
how  propositional  TEMPLOG  programs  can  be  trans¬ 
lated  into  a  temporal  fixpoint  calculus  and  prove  that 
they  can  express  essentially  all  regular  properties  of 
sequences. 

1  Introduction 

Temporal  logic  is  more  and  more  widely  acknowl- 
edged  as  a  useful  formalism  for  program  specification 
2uid  verification.  It  has  been  used  quite  extensively 
for  concurrent  programs  and  digital  hardware,  but  it 
is  also  applicable  whenever  it  is  necessary  to  specify 
or  describe  a  sequence  of  states  or  events,  such  as  in 

•This  research  was  supported  by  the  National  Science  Foun¬ 
dation  under  Grants  DCR^84-13230,  DCR^86-11272  and  CCR- 
87-14170,  by  the  Defense  Advanced  Research  Projects  Agency 
under  Contract  N00039-84-C-0211,  and  by  the  United  States 
Air  Force  Office  of  Scientific  Research  under  Contract  AFOSR- 
87-0149. 
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robot  planning  or  historical  databases.  Recently,  the 
idea  has  emerged  that  one  could  more  easily  use  the 
expressive  power  of  temporal  logic  if  it  could  be  made 
directly  executable,  for  instance  as  is  done  with  first- 
order  logic  in  PROLOG.  This  has  lead  to  the  definition 
of  a  number  of  programming  languages  based  on  tem¬ 
poral  logic  ([FKTM086],  [Mos86],  [AM87],  [Gab87], 
[Wad88],  [OW88a],  [Sak]). 

The  earliest  of  these  languages,  the  tempura  lan¬ 
guage  of  [Mos84,  Mos86]  is  based  on  a  subset  of  inter¬ 
val  temporal  logic  whose  formulas  can  be  interpreted 
as  traditional  imperative  programs.  In  logical  terms, 
executing  a  tempura  formula  (program)  amounts  to 
building  a  model  for  that  formula.  The  TOKio  lan¬ 
guage  of  [FKTM086]  is  an  extension  of  logic  program¬ 
ming,  but  resembles  tempura  in  the  way  it  treats  its 
temporal  constructs.  The  other  temporal  program¬ 
ming  languages  ([Aba87],  [AM87],  [Gab86,  Gab87], 
[Wad85,  Wad88],  [OW88a],  [Sak])  are  based  on  the 
logic  programming  paradigm  and  view  an  execution 
of  a  program  as  a  refutation  proof. 

For  this  last  class  of  languages,  important  semanti¬ 
cal  questions  are  left  unanswered.  First  among  these 
is  the  relation  between  the  operational  and  the  log¬ 
ical  semantics  of  the  languages.  Indeed,  in  classi¬ 
cal  logic  programming,  the  operational  and  the  logi¬ 
cal  semantics  coincide  because  of  the  completeness  of 
SLD-resolution  ([Hil74],  [Cla79],  [AvE82]).  Unfortu¬ 
nately,  first-order  temporal  logic  is  inherently  incom¬ 
plete  ([Aba87]).  So,  one  could  very  well  expect  that 
the  operational  and  the  logical  semantics  of  temporal 
programming  languages  do  not  and  even  cannot  coin¬ 
cide.  Another  unanswered  question  is  the  expressive¬ 
ness  of  these  languages.  Classical  Horn-clause  logic 
programming,  though  in  some  respects  weaker  than 
first-order  logic,  is  able  to  express  predicates  that  are 
not  first-order,  e.g.,  the  transitive  closure  of  a  relation 
([CH85]).  Similar  issues  appear  in  temporal  logic  pro¬ 
gramming  languages.  For  instance,  what  temporal 
properties  are  they  actually  capable  of  expressing? 
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Can  they  go  beyond  the  expressiveness  of  temporal 
logic? 

In  this  paper,  we  examine  these  questions  for  the 
TEMPLOG  language  of  [AM87].  We  capture  both  the 
declarative  and  the  operational  semantics  of  this  lan¬ 
guage  and  prove  that  they  coincide,  hence  proving 
that  the  fragment  of  temporal  logic  defined  by  TEM¬ 
PLOG  admits  a  complete  proof  system.  Then,  turn¬ 
ing  to  the  expressiveness  issue,  we  relate  the  proposi¬ 
tional  version  of  TEMPLOG  with  the  temporal  fixpoint 
calculus  /iTL  of  [Var88].  We  show  that  TEMPLOG  cor¬ 
responds  to  a  fragment  of  //TL  and  we  characterize 
its  expressiveness  in  terms  of  finite  automata. 

TEMPLOG  extends  classical  Horn  logic  program¬ 
ming  to  allow  specific  use  of  the  temporal  operators 
O  (next),  □  (always),  and  O  (eventually).  Programs 
are  sets  of  temporal  clauses,  and  computations  are 
proofs  by  refutation.  The  proof  method  used  is  a  res¬ 
olution  method  for  temporal  logic  to  which  we  refer  as 
TSLD-resolution.  We  study  the  declarative  (logical) 
semantics  of  TEMPLOG  and  define  it  both  in  model- 
theoretic  terms  and  in  fixpoint  terms.  For  this,  we  de¬ 
fine  the  notions  of  temporal  Herbrand  interpretation 
and  of  temporally  ground  formulas.  We  prove  that 
the  declarative  semantics  of  a  program  is  character¬ 
ized  by  the  minimal  Herbrand  model  of  the  program. 
We  then  show  how  to  associate  with  a  TEMP  log  pro¬ 
gram  a  mapping  whose  least  fixpoint  coincides  with 
the  minimal  Herbrand  model  of  the  program.  This 
provides  a  fixpoint  characterization  of  the  declarative 
semantics.  Next,  we  examine  the  TSLD-resolution 
method  that  is  the  basis  of  the  operational  semantics 
of  TEMPLOG.  We  establish  a  correspondence  between 
membership  in  the  fixpoint  of  the  mapping  associated 
with  programs  and  existence  of  a  temporally  ground 
resolution  proof,  thereby  obtaining  a  type  of  ground¬ 
completeness  theorem.  From  this  result,  we  establish 
the  completeness  of  TSLD-resolution  using  a  tempo¬ 
ral  lifting  lemma.  Our  proof  techniques  extend  those 
that  have  been  used  for  giving  semantics  to  clcissi- 
cal  logic  programming  ([vEK76],  [Cla79],  [AvE82], 
[Llo84],  [Apt87]). 

The  fixpoint  semantics  provides  the  necessary  tool 
for  studying  the  expressiveness  of  the  language.  To 
focus  on  the  temporal  expressiveness  of  the  language, 
we  study  its  expressiveness  in  the  propositional  case. 
Using  our  least  fixpoint  semantics  it  is  quite  easy  to 
show  that  the  expressiveness  of  TEMPLOG  queries  cor¬ 
responds  to  a  fragment  of  /xTL  allowing  only  least 
fixpoints  applied  to  positive  formulas.  We  further 
characterize  the  expressiveness  of  TEMPLOG  and  show 
that  it  essentially  corresponds  to  the  finite-word  regu¬ 
lar  languages  (more  precisely  to  the  w-languages  that 
are  obtained  by  extending  finite-word  regular  lan¬ 


guages).  TEMPLOG  can  thus  express  some  proper¬ 
ties  that  are  not  expressible  in  pure  temporal  logic  as 
this  last  language  cannot  express  all  regular  behaviors 
([Wol83])^.  On  the  other  hand,  there  are  formulas  of 
temporal  logic  that  are  not  expressible  in  TEMPLOG 
since  expressing  all  of  temporal  logic  in  fiTL  can  re¬ 
quire  using  greastest  fixpoints  or  the  alternation  of  a 
greatest  and  a  least  fixpoint  ([Par81]).  In  conclusion, 
if  one  is  only  interested  in  queries  that  can  be  can  be 
checked  on  a  finite  prefix  of  the  temporal  sequence,  as 
most  likely  would  be  the  case  for  historical  databases, 
the  temporal  expressiveness  of  TEMPLOG  is  perfectly 
adequate. 

2  The  Temporal  Language 

The  TEMPLOG  language  of  [AM87]  is  based  on  a 
clausal  subset  of  first-order  temporal  logic  with  time 
considered  discrete,  linear  and  extending  infinitely  in 
the  future  but  not  in  the  past.  First-order  tempo¬ 
ral  logic  extends  the  first-order  predicate  calculus  by 
allowing  the  application  of  temporal  operators  to  for¬ 
mulas.  The  operators  of  interest  here  are  O  (next), 
□  (always)  and  O  (eventually).  Constant  and  func¬ 
tion  symbols  are  assumed  to  have  a  time-independent 
interpretation;  they  are  said  to  be  rigid.  Predicate 
symbols  can  have  an  interpretation  that  varies  with 
time,  in  which  case  they  are  said  to  be  flexible.  In 
fact,  we  assume  that  all  the  predicate  symbols  are 
flexible.  (We  discuss  this  assumption  below.) 

A  formula  of  temporal  logic  is  interpreted  over  a 
structure  that  we  call  a  temporal  interpretation,  A 
temporal  interpretation  J  =  (D,E,a,  J)  consists  of 
a  domain  D,  a  sequence  of  states  (time  instants) 
E  =  (To,  ,  (72, . . .  that  is  isomorphic  to  w,  an  assign¬ 
ment  oc  to  variables,  and  an  interpretation  J,  Since 
the  constant  and  function  symbols  are  rigid,  the  in¬ 
terpretation  J  assigns  them  a  global  meaning  over 
the  domain  D,  as  in  classical  logic.  But  to  predi¬ 
cate  symbols,  which  are  flexible,  the  interpretation 
assigns  a  relation  over  D  for  every  state  (r<  in  the 
sequence  S.  If  i  is  a  natural  number,  is  the  tem¬ 
poral  interpretation  obtained  from  1  by  taking  the 
initial  state  to  be  (T,-  and  the  sequence  of  states  to  be 
<^*+1, ^*+2,  —  Given  a  language,  that  is,  a  collec¬ 
tion  of  variables  and  of  constant,  function,  and  predi¬ 
cate  symbols,  the  meaning  of  the  terms  and  formulas 
of  the  language  with  respect  to  a  temporal  interpre¬ 
tation  T  =  {DyTi,  a,  J)  is  given  by  a  function  7j  that 
provides  the  meaning  of  the  terms,  and  the  satisfac- 

^  Temporal  logic  is  known  to  have  the  expressiveness  dt  star- 
free  a/-regular  behaviors  ([ThoSl])  whereas  the  temporal  fix- 
point  calculus  corresponds  to  w-regular  behaviors  ([BB86]). 
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tion  relation  |=x  for  the  formulas.  They  are  defined 
inductively  in  the  usual  way.  The  function  7j  uses 
the  assignment  a  to  interpret  the  free  variables  and 
the  interpretation  J  to  interpret  the  constant  and  the 
function  symbols.  The  most  interesting  cases  of  the 
definition  of  the  satisfaction  relation  |=j  are  given 
below.  Let  p  be  an  £-ary  predicate  symbol  and  let 
be  terms. 


,.,</)  iff 

1=1  OF 

iff 

l=I(‘)  ■f’ 

1=1  DF 

iff 

for  every  i  in  u:  |=j(i)  F 

iff 

for  some  i  in  w:  ^j(i)  F 

The  notions  of  model,  satisfiability,  validity  and  logi¬ 
cal  consequence  (denoted  Fi  |=  F2)  are  defined  in  the 
usual  way.  Informally,  we  will  say  that  F  holds  at 
time  i  when  [=1(0  F. 

The  TEMPLOG  language  is  the  subset  of  first-order 
temporal  logic  with  the  following  syntax.  Let  A  de¬ 
note  an  atom  and  N  denote  a  nexi-aiorUj  that  is,  an 
atom  preceded  by  a  finite  number  of  O’s. 

Body:  B  :  e  \  A  \  Bi^B^  \  O  B  \  O B 
where  e  denotes  the  empty  body 
Initial  clause:  IC  ::=  N^B  \  ON  ^B 
Permanent  clause:  PC  ::=  □(iV B) 

Program  clause:  C  ::=  /C  |  PC 
Goad  clause:  G  B 

Throughout  this  paper,  we  use  the  symbol  A  to  de¬ 
note  an  atom,  N  for  a  next-atom,  B  for  a  body 
(empty  or  not),  C  for  a  clause,  P  for  a  program,  and 
G  for  a  goal  clause.  If  F  is  a  formula,  we  use  the  ab¬ 
breviation  O*  F  to  denote  the  formula  consisting  of 
F  preceded  by  %  occurrences  of  O. 

The  free  variables  in  program  and  goal  clauses  are 
implicitly  universally  quantified.  A  templog  pro¬ 
gram  consists  of  a  set  of  program  clauses,  that  is, 
a  conjunction  of  program  clauses.  In  a  clause,  the 
consequent  of  the  implication  is  called  the  head  (the 
antecedent  is  the  body).  In  a  body,  the  comma  stands 
for  the  conjunction  operator  (we  use  and  “A”  in¬ 
terchangeably  in  the  semantic  development).  A  pro¬ 
gram  clause  that  has  an  empty  body  is  a  fact  An 
empty  body  corresponds  to  “true”.  A  goal  clause  can 
be  seen  as  an  initial  clause  with  an  empty  head,  the 
empty  head  corresponding  to  “false”.  Hence,  a  goal 
of  the  form  ^  B  with  free  variables  Ai, . . . ,  An  cor¬ 
responds  to  the  formula  (VAi)  •  •  •  (VAn)“‘B,  that  is, 
-i(3Ai)--*(3An)B  (we  use  B”  and  “-^B”  inter¬ 
changeably  in  the  semantic  development). 

Example  2.1  The  following  simple  program  P  de¬ 
fines  a  predicate  p  such  that  p{X)  is  true  at  time  i 
for  X  =  5^* (a).  (We  use  capital  letters  for  variables, 


and  (strings  of)  lower-case  letters  for  constant,  func¬ 
tion  and  predicate  symbols.) 

p(a)  ^ 

o(Op(s(s(x)))-p(:^))  ■ 

Proof  Method 

Given  a  templog  program  and  a  goal,  a  computation 
consists  in  trying  to  derive  a  contradiction  using  tem¬ 
poral  resolution  rules.  When  a  refutation  is  obtained, 
it  is  usually  for  a  certain  instantiation  of  the  variables 
in  the  goal,  called  an  answer  subsiiiuiion.  We  assume 
some  familiarity  with  the  notions  of  substitution  and 
unification  (e.g.  [Rob65],  [LMM88],  [MW89]).  If  6 
and  (j)  are  substitutions,  we  denote  their  composition 
hy  9  o  <j)y  and  we  write  6  y  <i>  to  mean  that  0  is  more 
general  than  that  is,  there  is  a  substitution  A  such 
that  9oX  =  (f). 

We  refer  to  the  refutation  procedure  underlying 
TEMPLOG  as  TSLD-resoluiion  (for  Temporal  Xinear 
resolution  for  Definite  clauses^  with  a  Selection  func¬ 
tion)  by  analogy  with  the  SLD-resolution  procedure 
for  classical  logic  programming  ([AvE82]).  Every  step 
of  a  TSLD-derivation  consists  in  resolving  a  candidate 
nexUatom  from  the  current  goal  with  the  head  of  a 
program  clause,  to  produce  a  new  goal.  Before  defin¬ 
ing  the  notion  of  candidate  next-atom  precisely,  we 
have  to  make  a  comment  about  the  bodies  of  clauses. 
Syntactically  distinct  bodies  may  in  fact  be  logically 
equivalent.  So  we  assume  that  we  are  always  deal¬ 
ing  with  the  canonical  form  of  the  body,  a  body  (or 
a  goal)  being  in  canonical  form  if  its  occurrences  of 
O  are  pushed  all  the  way  inwards  and  if  its  next- 
atoms  are  in  the  scope  of  the  least  possible  number 
of  O’s.  Each  body  has  a  unique  equivalent  canon¬ 
ical  form  (up  to  commutativity  and  associativity  of 
the  conjunction).  A  next-atom  in  a  goal  is  said  to 
be  candidate  if  it  is  in  the  scope  of  at  most  one  O 
in  the  canonical  form  of  the  goal.  There  is  at  least 
one  candidate  next-atom  in  any  nonempty  goal.  At 
every  step  of  a  derivation  using  the  TSLD-resolution 
method,  the  selection  function  or  computation  rule 
selects  from  the  current  goal  the  candidate  next-atom 
to  be  resolved  in  the  next  resolution  step.  This  next- 
atom  is  referred  to  as  the  selected  next-atom.  The 
resolution  rules  used  in  TSLD-derivations  are  given 
in  Table  1.  For  each  rule,  the  selected  candidate  next- 
atom  is  O*  Ay  and  6  is  the  most-general  unifier  (mgu) 
of  A  and  The  resolvent  is  also  referred  to  as  the 
derived  goal 

Let  P  be  a  program,  G  a  goal,  and  R  a  computation 
rule.  A  TSLD-derivation  for  P  U  {G}  via  rule  R  is 

^  A  definite  clause  is  a  Horn  clause  with  a  nonempty  head. 
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_ 

Cond. 

Goal 

Clause 

Resolvent  (Derived  Goal) 

D 

o*'  A'  ^  B' 

-(5i,  5',  52)0 

B 

i  >  j 

^51,0*  ^,  B2 

^(5i.  5',  52)0 

B 

i  >  j 

52 

^(5i,0‘--*  5',  52)0 

B 

j  >  i 

^  5i,  0(52,  OM,  53),  54 

-  (5i,  OJ-‘  52,  5',  Oi-'Ba,  54)0 

B 

j  >  i 

.-5i,0(52,0M,  53),  54 

^  (5i,  5',  0(0-' 52,  O-'-*  53),  54)  0 

B 

i  >  j 

^5i,0(52,0M,  53),  54 

LkMIHW 

^(5i,  5',  0(52,53),  54)0 

B 

j  >  i 

^  5i,  0(52,  O' A,  53),  54 

EBglllilM.gl 

^  (5i,  0(0^-  52,  5',  O^-'  53),  54)  0 

8 

i  >  j 

^  5i,  0(52,  OM.  53),  B4 

^(5i,0(52,0--'  5',  53),  54)0 

Table  1:  TSLD-Resolution  Rules  for  templog  {6  =  mgu{A,A*)) 


characterized  by  a  sequence  of  goals  Go ,  Gi ,  . . .  where 
Go  =  G;  a  sequence  of  candidate  next- atoms  iVo, 
A^i,  ...  selected  by  R  from  Go,  Gi,  . . . ,  respectively; 
a  sequence  of  program  clauses  Gi,  G2,  ...  where  each 
Ci  has  been  renamed  so  that  none  of  the  variables  ap¬ 
pearing  in  it  also  appears  in  G,*_i  or  in  Gi, . . . ,  G,'_i; 
and  a  sequence  of  substitutions  ^1,  62^  . . . ,  such  that 
Gf+i  is  the  goal  obtained  by  applying  one  of  the 
TSLD-resolution  rules  to  G,+i  and  Gi  with  selected 
next-atom  Ni  and  mgu  A  TSLD-refutaiion  for 
P  U  {G}  via  Ris  a,  finite  TSLD-derivation  whose  last 
goal  is  empty.  (We  assume  implicitly  that  the  initial 
goal  G  is  nonempty.)  The  R-compuied  answer  sub sii- 
iuiion  associated  with  an  n-step  refutation  of  PU{G} 
via  R  is  the  substitution  obtained  by  restricting  the 
composition  (^1  o  •  •  •  o  to  the  variables  of  G.  An 
answer  substitution  0  for  PU{G}  is  said  to  be  correct 
if  P  1=  (V*)P0.  The  (nonempty)  goal  G  is  said  to  be 
n-refutable  (n  >  1)  if  there  is  a  TSLD-refutation  of 
P  U  {G}  of  length  less  than  n  via  each  computation 
rule;  it  is  refutable  if  it  is  n-refutable  for  some  n.  No¬ 
tice  that  a  goal  is  refutable  not  simply  if  it  has  one 
TSLD-refutation,  but  if  it  has  a  TSLD-refutation  via 
every  computation  rule,  which  is  stronger. 

Remark:  We  have  augmented  the  original  defini¬ 

tion  of  TEMPLOG  given  in  [AM87]  to  allow  function 
symbols  in  terms.  Also,  we  have  assumed  that  all 
the  predicate  symbols  are  flexible,  unlike  in  [AM87] 
where  both  rigid  and  flexible  predicate  symbols  are 
allowed.  However,  our  assumption  is  not  restrictive 
as  the  time-independence  of  a  (^-ary)  predicate  p  can 
easily  and  efficiently  be  expressed  in  TEMPLOG  with 
the  clause  □p(Xi, . . . ,  AT^)  ^  Op(Ai, . . . , X^).  The 
proof  method  underlying  the  execution  of  programs 
was  given  in  [AM87]  for  a  fixed  computation  rule  that 
consists  in  always  selecting  the  leftmost  candidate 
next-atom  as  in  PROLOG  ([CM84]).  Here,  we  study 


the  semantics  of  TEMPLOG  for  an  arbitrary  computa¬ 
tion  rule. 

3  Declarative  Semantics  for 

TEMPLOG 

A  TEMPLOG  program  is  a  set  of  statements  in  tem¬ 
poral  logic.  Given  such  a  program,  a  computation 
consists  in  trying  to  derive  information  that  follows 
from  the  program.  So  the  declarative  meaning  of  a 
logic  program  is  characterized  by  the  set  of  bodies 
that  are  logical  consequences  of  the  program,  that  is, 
the  set  of  bodies  that  are  true  in  every  model  of  the 
program.  In  a  first  stage,  we  give  a  characterization 
of  this  denotation  of  programs  in  terms  of  minimal 
Herbrand  model.  For  this,  we  introduce  the  notion 
of  temporal  Herbrand  model  and  prove  that  if  a  pro¬ 
gram  has  a  temporal  model  then  it  has  a  temporal 
Herbrand  model.  Then  we  show  that  the  class  of  tem¬ 
poral  Herbrand  models  of  a  program  is  closed  under 
intersection.  Combining  these  results,  we  prove  that 
the  minimal  Herbrand  model,  that  is,  the  intersection 
of  the  temporal  Herbrand  models  of  a  program,  sat¬ 
isfies  exactly  the  bodies  that  are  logical  consequences 
of  the  program,  and  hence  provides  a  characterization 
of  the  denotation  of  a  program.  In  a  second  stage,  we 
show  how  to  associate  with  a  TEMPLOG  program  P  a 
function  Tp  on  the  domain  of  the  temporal  Herbrand 
interpretations  for  P,  Intuitively,  this  mapping  cor¬ 
responds  to  one  step  of  ground  inference  from  P.  We 
prove  that  this  mapping  is  continuous  and  that  its 
least  fixpoint  is  exactly  the  minimal  Herbrand  model 
of  the  program,  thereby  providing  a  fixpoint  char¬ 
acterization  of  the  declarative  meaning  of  TEMPLOG 
programs. 
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3.1  Model-Theoretic  Semantics 

Let  L  be  a  language  characterized  by  its  collection 
of  variables  and  of  constant,  function  and  predicate 
symbols.  The  Herbrand  universe  Ui  of  L  is  the  set  of 
variable-free  (that  is,  ground)  terms  constructed  from 
the  constant  and  the  function  symbols  in  L.  This  no¬ 
tion  coincides  with  the  notion  of  Herbrand  universe 
in  classical  logic,  which  is  quite  natural  since  the  con¬ 
stant  and  function  symbols  are  rigid.  The  temporal 
Herbrand  base  Bl  of  L  is  the  set  of  ground  next-atoms 
constructed  from  the  predicate  symbols  of  L  and  the 
ground  terms  of  the  Herbrand  universe  Ul.  A  tem¬ 
poral  Herbrand  interpretation  for  a  language  L  is  a 
temporal  interpretation  with  the  Herbrand  universe 
Ul  as  domain  mapping  the  ground  terms  to  ‘^them¬ 
selves”  in  Ul*  A  temporal  Herbrand  interpretation 
for  (the  closed  formulas  of)  a  language  L  coincides 
with  a  subset  of  the  temporal  Herbrand  base  Bl*  it 
is  the  set  of  ground  next-atoms  that  are  true  under 
the  interpretation  (at  the  initial  time).  So  a  ground 
next-atom  N  is  satisfied  by  a  temporal  Herbrand  in¬ 
terpretation  /,  denoted  \=^j  N,  if[  N  £  I.  Notice  that 
one  could  equivalently  consider  the  Herbrand  base  Bl 
to  be,  as  in  classical  logic,  the  set  of  ground  atoms 
of  L,  Then,  a  temporal  Herbrand  interpretation  I 
could  be  defined  as  an  u;-sequence  of  subsets  of  Bl, 
or  equivalently,  a  function  J  :  cj  — ►  2^^  that  asso¬ 
ciates  with  every  natural  number  i  the  set  of  ground 
atoms  that  are  true  at  time  i. 

The  satisfaction  relation  for  ground  TEMPLOG 
clauses  has  a  simple  reformulation  when  one  intro¬ 
duces  the  notions  of  temporally  ground  formula  and 
of  temporally  ground  instance.  A  formula  is  said  to 
be  temporally  ground  (TG)  if  O  is  the  only  tem¬ 
poral  operator  that  appears  in  it.  So  atoms  and 
next-atoms  as  well  as  program  clauses  of  the  form 
O*  A  Ai, . . . , O*™  Arm  and  goal  clauses  of  the 

form  -H-  O*^  Ai, . . . ,  O*"*  Am  are  temporally  ground^. 
A  temporally  ground  instance  (TGI)  of  a  body  B  is 
a  temporally  ground  body  obtained  from  B  by  re¬ 
placing  every  occurrence  of  O  by  a  finite  number  of 
O’s.  Similarly,  a  temporally  ground  instance  (TGI) 
of  a  program  clause  C  is  obtained  from  C  by  replac¬ 
ing  each  occurrence  of  □  and  each  occurrence  of  O 
by  a  finite  number  of  O’s.  Using  the  definition  of  the 
satisfaction  relation,  one  can  prove  the  following. 

Proposition  3.1  Let  X  be  a  temporal  interpretation 
of  a  program  or  goal  clause  C  (a  body  JB,  resp.).  Then 
X  satisfies  C  (Bj  resp.)  if  and  only  ifX  satisfies  every 
TGI  ofC  (some  TGI  of  B,  resp.) 

^Bewaa-e  of  the  difference  between  ground  and  temporally 
ground',  ground  means  variable-free  whereas  temporally  ground 
means  U-free  and  O-free. 


PROOF:  The  proof  is  straightforward,  once  one  has 
noticed  that  [=j(i)  F  if  and  only  if  [=j  O*  F.  ■ 
Intuitively,  the  property  holds  because  the  temporal 
operators  other  than  O  are  of  D-force  in  clauses  and 
of  0-force  in  bodies. 

A  clause  is  said  to  be  strictly  ground  (SG)  if  it  is 
both  ground  (variable-free)  and  temporally  ground 
(□-free  and  O-free).  A  strictly  ground  instance  (SGI) 
of  a  clause  is  an  instance  of  the  clause  that  is  both 
ground  and  temporally  ground.  It  follows  from 
Proposition  3.1  that  a  temporal  Herbrand  interpre¬ 
tation  for  a  program  P  satisfies  P  if  and  only  if  it 
satisfies  every  strictly  ground  instance  of  every  clause 
in  P. 

Proposition  3.2  Let  S  be  a  set  o/templog  clauses. 
If  S  has  a  temporal  models  then  S  has  a  temporal 
Herbrand  model. 

PROOF:  Let  L  be  the  language  of  the  clauses  in  5, 
and  let  J  be  a  temporal  model  of  S.  We  associate 
with  X  the  temporal  Herbrand  interpretation 

I={N 

Using  Proposition  3.1,  one  can  show  that  /  is  a  model 
of  5.1 

Property  3.3  (Model  Intersection)  Let  P  be  a 
TEMPLOG  program.  The  intersection  of  a  collection 
of  temporal  Herbrand  models  of  P  is  a  temporal  Her¬ 
brand  model  of  P. 

PROOF:  Using  Proposition  3.1.  ■ 

Intuitively,  the  Model  Intersection  Property  holds  be¬ 
cause  the  temporal  operators  other  than  O  are  all  of 
□-force  in  clauses.  It  would  not  hold  for  example  if 
the  language  allowed  the  use  of  clauses  of  the  form 
Op  Indeed,  both  Ii  =  {Op}  and  I2  =  {O^p}  are 
models  of  this  clause,  but  their  intersection  is  not. 

Knowing  that  the  intersection  of  the  temporal  Her¬ 
brand  models  of  a  program  P  is  also  a  model  for 
P,  we  can  now  establish  that  this  smallest  Herbrand 
model,  denoted  Mp,  provides  a  characterization  of 
the  declarative  semantics  of  P. 

Theorem  3.4  Let  P  be  a  TEMPLOG  program  and  B 
a  ground  body:  P  B  if  and  only  if  |=Mp  B. 

PROOF:  [=>]  Trivial  (Mp  is  a  model  of  P). 

[^]  Let  |=Mp  B.  By  Prop.  3.1,  there  exists  a  TGI  B* 
of  B  such  that  |=Mp  P*  *  Let  be  A  . . .  A  Nm  * 
Then 

t=Mp  NiA...ANm  {N\,-  ■  ■ ,  Nm)  c  Mp 
^  for  every  temporal  Herbrand  model  M  of  P: 
{Nu...,Nrr^}CM 

=>  for  every  temporal  Herbrand  model  M  of  P: 

Nm  B*. 
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It  follows  that  for  every  temporal  Herbrand  model 
M  of  P  there  is  a  TGI  B*  of  B  such  that  ^at  B*, 
By  Proposition  3.1,  we  thus  have  \=m  B  for  every 
temporal  Herbrand  model  M  of  P.  So  PU  {“»P}  has 
no  temporal  Herbrand  model,  and  hence  PU{-'P}  is 
unsatisfiable  (Proposition  3.2).  Therefore  P  [=  P.  ■ 

The  following  corollary  specifies  the  contents  of  Mp 
as  a  subset  of  the  Herbrand  base.  It  is  simply  a  re¬ 
striction  of  Theorem  3.4  to  the  case  of  bodies  that  are 
single  ground  next-atoms. 

CoroUary  3,5  Mp  =  {O*  A  £  Bl  :  P  O*  A}. 

3,2  Fixpoint  Semantics 

Let  P  be  a  TEMPLOG  program  with  language  L.  We 
associate  with  P  a  mapping  Tp  that  intuitively  rep¬ 
resents  one  step  of  strictly  ground  inference  from  P 
(we  will  prove  it  in  the  next  section).  The  domain  of 
this  mapping  is  the  complete  lattice  (2^^,  C).  Let  / 
be  a  temporal  Herbrand  interpretation  of  P,  that  is, 
I  G  2^^ .  The  mapping  Tp  is  defined  by: 

Tp{I)  =  {N  e  Bl  :  N  ^  is  3iSGlo^a^ 

clause  in  P  and  {iVi, . . . ,  Nm}  Q 

For  example,  let  0(0^  A  ^  B)  he  s,  ground  in¬ 
stance  of  a  permanent  clause  in  P.  For  every  k  £  uj, 
if  there  is  a  TGI  Ni  A  ...  A  of  B  such  that 
{O*'  ATi, . . . ,  O*^  c  J,  then  0^+*^  A  E  Tp{I).  No- 
tice  that  this  definition  of  Tp  is  similar  to  the  defi¬ 
nition  of  the  mapping  associated  with  classical  logic 
programs,  except  that  in  classical  logic  one  deals  with 
atoms  and  with  ground  instances  of  clauses  where 
in  temporal  logic  we  deal  with  next-atoms  and  with 
strictly  ground  instances  of  clauses,  respectively.  As  a 
result  of  this  resemblance,  the  properties  of  Tp  given 
below  (continuity,  Proposition  3.6,  and  Theorem  3.7) 
admit  proofs  that  are  very  similar  to  the  proofs  of 
the  analogous  results  for  classical  logic  programming 
([vEK76],  [AvE82],  [Llo84],  [Apt87]).  The  mapping 
Tp  is  continuous  on  (2^^,C),  and  so,  by  the  fix- 
point  theorem  its  least  fixpoint  lfp{Tp)  is  given  by 
Tp  T  u;  =  lub{Tp\ib)  :i>0}  =  U^o^p‘(0) 
[Llo84])'^.  The  next  proposition  provides  a  criterion 
for  a  temporal  Herbrand  interpretation  to  be  a  model 
of  a  program  P  as  a  condition  on  Tp. 

Proposition  3.6  Let  I  be  a  temporal  Herbrand  in¬ 
terpretation  for  P.  Then  \=j  P  iffTp{I)  C  L 

proof:  1=/  P  iff  for  every  SGI  W  ^  A^i, . . . ,  of 
every  clause  in  P:  \=x  N  Ni, , , , ,  Nm  (Prop.  3.1), 

^  hb  stands  for  least  upper  bound  and  gib  stands  for  greatest 
lower  bound. 


that  is,  AT  G  I  if  . . . ,  Nm]  Q  T  This  condition 
is  equivalent  to  Tp(/)  C  /,  ■ 

Using  Proposition  3.6,  we  can  prove  the  correspon¬ 
dence  between  the  least  Herbrand  model  Mp  and  the 
least  fixpoint  of  Tp. 

Theorem  3.7  Mp  =  Tp  w. 

PROOF:  The  least  Herbrand  model  Mp  is  the  inter¬ 
section  of  the  temporal  Herbrand  models  of  P.  So  in 
the  complete  lattice  (2^^ ,  C): 

Mp  =  glb{I  £  2^^  :  |=/  P} 

=  glb{I  £  2^^  :  Tp(7)  C  /}  (by  Prop.  3.6). 

In  other  words,  Mp  is  the  greatest  lower  bound  of 
the  pre-fixpoints  of  Tp,  which  is  lfp{Tp)  by  a  version 
of  the  fixpoint  theorem  (e.g.  [Llo84]).  And  so  Mp  = 
Tp  t  a;  since  Tp  is  continuous.  ■ 

4  Soundness  and  Complete¬ 
ness  of  TSLD-resolution 

In  this  section,  we  establish  the  soundness  and  the 
completeness  of  the  TSLD-resolution  proof  method 
underlying  TEMPLOG ’s  execution.  The  soundness 
proof  is  straightforward.  We  first  establish  the  cor¬ 
rectness  of  each  resolution  rule. 

Lemma  4.1  (Soundness  of  the  Rules)  Let  ^  P' 
be  the  resolvent  of  the  goal  B  and  the  TEMPLOG 
program  clause  C  with  most  general  unifier  6,  Then 
C^{B6^  B'). 

PROOF;  The  proof  is  carried  out  separately  for  each 
of  the  eight  TSLD-resolution  rules  of  Table  1.  ■ 

Lemma  4,1  allows  us  to  prove  the  following  theorem 
of  which  soundness  is  an  immediate  corollary. 

Theorem  4.2  (Correctness  of  Computed  An¬ 
swer  Substitution)  Let  P  he  a  TEMPLOG  program 
and  B  a  body.  If  PU  {<—  B]  has  a  refutation  with 
computed  answer  substitution  0,  then  0  is  correct,  that 

is,  p  1=  {\f*)Be. 

PROOF:  By  induction  on  the  length  of  the  refutation 
of  P  U  B]  and  using  Lemma  4.1.  ■ 

CoroUary  4.3  (Soundness)  Let  P  be  a  TEMPLOG 
program  and  G  a  goal.  //  P  U  {G}  has  a  TSLD- 
refutation  then  P  U  {G}  is  unsatisfiable. 

In  classical  logic,  the  proof  of  the  completeness  of 
resolution  is  based  on  two  main  lemmas:  a  lemma 
stating  the  completeness  of  ground  resolution  and  a 
lifting  lemma  to  “lift”  the  ground-completeness  re¬ 
sult  to  the  first-order  completeness  result  ([Rob65], 


[AvE82],  [Llo84],  [Apt87]).  In  the  case  of  tempo¬ 
ral  logic,  our  strategy  is  somewhat  similar.  We  first 
establish  the  correspondence  between  membership 
in  the  fixpoint  of  the  mapping  Tp  and  temporally 
ground  refutability  (notion  to  be  defined  precisely 
below),  thereby  obtaining  a  completeness  result  for 
strictly  ground  formulas  (Lemma  4.6).  Then  we  in¬ 
troduce  a  temporal  lifting  lemma  (Lemma  4.8)  that 
allows  us  to  “lift”  this  completeness  result  for  both 
ground  and  temporally  ground  formulas  to  a  com¬ 
pleteness  result  for  ground  formulas  (Lemma  4.9). 
Finally,  combining  this  ground-completeness  lemma 
with  a  lifting  lemma  (Lemma  4.11)  we  obtain  the 
desired  completeness  theorem  (Theorem  4.12).  It  is 
via  the  Temporal  Lifting  Lemma  that  the  notion  of 
temporal  groundedness  plays  its  crucial  role.  The 
completeness  theorem  that  we  prove,  that  is,  The¬ 
orem  4.12,  is  a  strong  form  of  completeness.  It  states 
that  unsatisfiability  of  a  program  and  goal  implies 
not  simply  existence  of  a  refutation  but  rather  exis¬ 
tence  of  a  refutation  via  each  computation  rule  (that 
is,  refutability).  At  the  end  of  this  section,  we  prove 
a  version  of  the  completeness  theorem  that  takes  the 
computed  answer  substitutions  into  account. 

Let  us  first  introduce  the  notions  of  temporally 
ground  refutation  and  temporally  ground  refutabil¬ 
ity.  A  temporally  ground  derivation/refutation  (TG- 
derivation/refutation)  for  a  program  P  and  aTG-goal 
G  is  a  TSLD-derivation/refutation  for  G  that  only 
uses  TGI  of  the  clauses  in  P  (and  hence  only  uses 
the  first  TSLD-resolution  rule  of  Table  1).  There  is 
no  occurrence  of  O  in  the  goals  of  a  TG-refutation 
and  no  occurrence  of  □  or  O  in  the  clauses  used  in 
a  TG-refutation.  Given  a  program  P,  a  temporally 
ground  goal  G  is  said  to  be  n-TG-refutahle  (n  >  1) 
if  there  is  a  TG-refutation  for  P  U  {G}  of  length  less 
than  n  via  every  computation  rule;  G  is  TG-refutable 
if  it  is  n-TG-refutable  for  some  n  >  1.  As  a  first 
step  of  the  completeness  proof,  we  introduce  a  lifting 
lemma  for  TG-refutations  (Lemma  4.5)  that  will  be 
needed  in  the  proof  of  the  completeness  theorem  for 
strictly  ground  refutations  (Lemma  4.6).  This  lifting 
lemma  follows  from  the  following  lemma  which  estab¬ 
lishes  a  correspondence  between  TG-refutations  of  a 
temporally  ground  goal  and  an  instance  of  this  goal. 

Lemma  4A  Let  P  be  a  TEMPLOG  program,  G  a  tem¬ 
porally  ground  goal,  6  a  substitution,  and  n  >  1.  To 
any  TG-refutation  of  PU{G0}  with  mgu^s 
there  corresponds  a  TG-refutation  of  P  U  {G}  with 
mgu^s  atom  selected  at  any 

step  of  the  TG-refutation  ofP\j{G6}  is  an  instance 
of  the  atom  selected  at  the  corresponding  step  of  the 
TG-refuiation  of  P  U  {G}  and  the  program  clauses 
used  are  the  same  in  both  TG-refutations.  Moreover, 


(tf'i  o  •  •  •  0  0^)  ^  (S  o  o  •  •  •  o  dn)- 

PROOF:  By  induction  on  n.  The  substitution  0  can  be 
assumed  to  not  affect  the  variables  occurring  in  the 
program  clauses  without  loss  of  generality.  The  key 
to  this  proof  is  the  fact  that  if  the  atom  A0  selected 
for  the  first  step  of  the  TG-refutation  for  P  U  {G0} 
unifies  with  the  atom  in  the  head  of  a  program 
clause  and  0i  =:  mgu(A0,A*),  then  A  and  A'  also 
unify.  This  follows  from  A00i  =  A^0i  —  A'00\,  which 
holds  because  0  does  not  affect  the  variables  in  A'. 
Moreover,  if  0^  =  mgu{A,A*)  then  0[  y{0o  ^i)  (by 
definition  of  an  mgu).  In  the  inductive  case  (n  >  1), 
one  also  has  to  show  by  a  similar  argument  that  the 
derived  goal  obtained  after  the  first  resolution  step  for 
P  U  {G0}  is  an  instance  of  the  derived  goal  obtained 
after  the  corresponding  step  for  P  U  {G}.  ■ 

Lemma  4.5  (Lifting  for  TG-Refutability)  Let  P 
be  a  TEMPLOG  program,  G  a  temporally  ground  goal, 
0  a  substitution,  and  n  >  1.  IfG0  is  n-TG-refutable, 
then  G  is  n-TG-refutable. 

PROOF:  Immediate  consequence  of  Lemma  4.4.  ■ 

Lemma  4.6  (Strictly  Ground  Completeness) 
Let  P  be  a  TEMPLOG  program  and  N  a  ground  next- 
atom.  If  N  £  Mp  then  P  U  N}  is  TG-refutable. 

PROOF:  Let  N  £  Mp.  Since  Mp  =  Tp  t  w  (The¬ 
orem  3.7),  there  is  bl  k  £  w  such  that  N  £  Tp^(0). 
One  proves  by  induction  on  k  that  if  iV  E  Tp*(0)  then 
PU{<—  N}  is  TG-refutable.  The  base  case  is  immedi¬ 
ate.  In  the  inductive  step,  let  N  £  Tp(Tp*”^(0)).  So 
there  is  a  SGI  (TV'  iVi, . . . , Nm)0  of  a  clause  in  P 
such  that  N'0  =  N  and  {TVi(9, . . . ,  Nm0}  C  Tp*-^(0). 
By  the  induction  hypothesis,  each  of  P  U 
. . . ,  PU{^  Nfn0]  is  TG-refutable.  Since  the  Ni0  are 
ground,  their  TG-refutations  are  independent  from 
one  another,  and  they  can  be  combined  in  any  desired 
way.  So  P  U  {<—  (Ni, . . . ,  Nm)0}  is  TG-refutable. 

The  first  step  of  a  TG-refutation  for  P  U  {<—  N} 
uses  TV'  TVi , . . . ,  Nm  •  The  derived  goal  is  a  goal 
of  which  ^  (JVi, . . . ,  Nm)0  is  an  instance,  and  so,  by 
Lemma  4.5,  it  is  TG-refutable.  Therefore  PU{<—  TV} 
is  TG-refutable.  ■ 

The  next  step  in  the  proof  of  the  completeness 
of  TSLD-resolution  is  the  “temporal  lifting”  of  the 
Strictly  Ground  Completeness  Lemma  (by  the  Tem¬ 
poral  Lifting  Lemma).  We  first  introduce  Lemma  4.7 
which  establishes  the  correspondence  between  the 
steps  of  a  TG-derivation  and  those  of  a  TSLD- 
derivation.  The  Temporal  Lifting  Lemma  follows  im¬ 
mediately  from  Lemma  4.7. 

Lemma  4.7  Let  G  be  a  goal,  and  let  G*  be  a  tempo¬ 
rally  ground  instance  of  G.  Let  TV  be  the  next-atom 
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selected  from  G  by  a  given  computation  rulCf  and  let 
N*  be  the  corresponding  next-atom  in  G* .  Let  C  be  a 
program  clause,  and  let  C*  be  a  temporally  ground  in¬ 
stance  of  C.  If  there  is  a  TG-resolution  step  between 
C*  and  G*  with  selected  next-atom  N*  that  produces 
the  (temporally  ground)  derived  goal  then  there 
is  a  TSLD-resolution  step  between  C  and  G  with  se¬ 
lected  next-atom  N  that  produces  the  derived  goalGi, 
and  G\  is  a  temporally  ground  instance  ofG\, 

PROOF:  The  proof  separates  in  cases.  We  have  to 
consider  the  cases  where  the  next- atom  i\r*  corre¬ 
sponds  to  a  next-atom  N  that  is  in  the  scope  of  zero 
or  one  <0  in  G.  For  each  of  these  two  cases,  we  con¬ 
sider  the  subcases  where  the  program  clause  C*  is 
the  TGI  of  a  clause  C  that  is  initial  with  or  without 
□  in  the  head  or  permanent.  In  studying  all  these 
cases,  we  exhaust  the  eight  TSLD-resolution  rules  of 
Table  1.  ■ 

Lemma  4.8  (Temporal  Lifting)  Let  P  be  a  TEM- 
PLOG  program  and  G  a  goal.  If  G  has  a  temporally 
ground  instance  G*  such  that  P  U  {G*}  is  n-TG- 
refuiable  for  some  n  >  1,  then  PU  {G}  is  refutable^. 

PROOF:  By  induction  on  n  and  using  Lemma  4.7.  I 

Lemma  4.9  (Ground  Completeness)  Let  P  be  a 
TEMPLOG  program  and  B  a  ground  body.  If\=Mp  B 
then  P  U  {-H-  p}  is  refutable. 

PROOF:  Let  hMp  B.  By  Prop.  3.1,  there  is  a  TGI 
Ni  A  . . .  A  Nm  of  B  such  that  {Ni,. . . ,  C  Mp. 
For  this  TGI  of  P,  we  have 

{Ni,...,Nm}CMp 

=>  Vi  =  1, . . . ,  m:  P  U  Ni}  is  TG-refutable 

(by  the  Strictly  Ground  Completeness  Lemma) 
=>  P  U  {4-  ATi, . . . ,  Nm}  is  TG-refutable 

since  the  iVj’s  are  ground  and  their  refutations  are 
temporally  ground.  Therefore,  PU{^  P}  is  refutable 
(by  the  Temporal  Lifting  Lemma).  ■ 

Next  we  introduce  a  lifting  lemma  to  be  used  to¬ 
gether  with  the  Ground  Completeness  Lemma  in  the 
proof  of  the  Completeness  Theorem.  It  is  the  analo¬ 
gous  for  TSLD-refut ability  of  the  Lifting  Lemma  for 
TG-refutability  (Lemma  4.5).  As  for  TG- refutability, 
we  introduce  a  preliminary  lemma  from  which  the 
Lifting  Lemma  directly  follows. 

Lemma  4.10  Let  P  be  a  TEMPLOG  program,  G  a 
goal,  6  a  substitution,  and  n  >  \.  To  any  TSLD- 
refutation  0/  P  U  {G^}  with  mgu's  ^1, . . . ,  there 
corresponds  a  TSLD-refutation  ofP\j{G}  with  mgu^s 
^1,...,^^  such  that  the  atom  selected  at  any  step  of 

^Remember  that  we  defined  refutability  to  mean  existence 
of  a  refutation  via  every  computation  rule. 


the  refutation  ofPu{G6}  is  an  ms^ance  of  the  atom 
selected  at  the  corresponding  step  of  the  refutation  of 
P  U  {G}  and  the  program  clauses  used  are  the  same 
in  both  TSLD-refutations.  Moreover,  ^ 

(0  0^1  o  •  •  •  o  9n). 

PROOF:  Similar  to  the  proof  of  Lemma  4,4.  ■ 

Lemma  4.11  (Lifting)  Let  P  be  a  TEMPLOG  pro¬ 
gram,  G  a  goal,  6  a  substitution,  and  n  >  1.  IfG9  is 
n-refutable,  then  G  is  n-refutable. 

PROOF:  Immediate  consequence  of  Lemma  4.10.  ■ 

Theorem  4.12  (Completeness)  Let  P  be  a  TEM¬ 
PLOG  program  and  G  a  goal.  //PU{G}  is  unsatisfi- 
able,  then  P\J{G}  is  refutable,  that  is,  PU{G}  has 
a  refutation  via  every  computation  rule. 

PROOF:  Let  G  be  the  goal  P  such  that  PU{<—  B} 
is  unsatisfiable.  For  every  temporal  model  J  of  P,  we 
have  ~'B,  and  in  particular  "^5.  So  there  is 
a  ground  instance  B9  of  P  such  that  t=Mp  B9,  and 
by  the  Ground  Completeness  Lemma  P  U  {<—  B9}  is 
refutable.  Therefore  P  U  {<—  P}  is  refutable  (by  the 
Lifting  Lemma).  ■ 

Next,  we  extend  this  result  to  take  the  computed 
answer  substitutions  into  account.  One  cannot  show 
that  any  correct  answer  substitution  can  be  computed 
by  a  refutation.  Instead,  we  prove  Theorem  4.14 
which  states  that  for  any  correct  answer  substitu¬ 
tion,  one  can  compute  via  every  computation  rule 
an  answer  substitution  that  is  more  general  than  the 
correct  answer  substitution.  For  this,  we  first  intro¬ 
duce  Lemma  4.13.  The  proofs  of  Lemmas  4.13  and 
Theorem  4.14  do  not  use  the  Completeness  Theorem 
which  could  then  also  be  derived  as  a  corollary  to 
Theorem  4.14. 

Lemma  4.13  Let  P  he  a  TEMPLOG  program  and  B  a 
body.  //P  1=  (V*)P,  then  there  is  a  TSLD-refutation 
of  P  U  {<«--  P}  via  every  computation  rule  with  the 
empty  substitution  as  computed  answer  substitution. 

PROOF:  Let  ^  be  a  substitution  that  replaces  the  free 
variables  of  P  with  arbitrary  new  constants.  Then 
P  \=z  B 9  where  B9  is  ground.  So  by  the  Ground  Com¬ 
pleteness  Lemma,  Pu{^  B9}  has  a  TSLD-refutation 
(with  empty  computed  answer  substitution)  via  ev¬ 
ery  computation  rule.  But  the  new  constants  can 
be  textually  replaced  by  the  original  variables  in  the 
refutations  of  PU  {♦—  P^}  to  produce  refutations  of 
PU{^  P}  with  the  empty  substitution  as  computed 
answer  substitutions.  I 

Theorem  4.14  (Computability  of  Correct  An¬ 
swer  Substitution)  Let  P  be  a  TEMPLOG  program, 
G  a  goal,  and  9  a  correct  answer  substitution  for 
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P  U  {G}.  For  any  computation  rule  there  is  an 
Recomputed  answer  substitution  (Tr  for  PU{G}  such 
that  CRy^’ 

PROOF:  Let  G  be  B.  Since  ^  is  a  correct  answer 
substitution  for  P  U  B},  we  have  P  ^  (V*)B^. 
So  by  Lemma  4.13,  P  U  BO}  has  a  TSLD- 
refutation  with  the  empty  answer  substitution  via  ev¬ 
ery  computation  rule,  and  the  desired  result  follows 
by  Lemma  4.10.  1 

5  A  fragment  of  templog:  tlI 

In  this  section,  we  examine  a  fragment  of  TEMPLOG 
that  we  call  TLl.  In  TLl,  the  body  of  a  clause  can¬ 
not  contain  any  occurrence  of  O  and  initial  clauses 
cannot  have  □  in  their  head.  So  in  TLl,  a  body  is 
a  conjunction  of  next- atoms  and  a  clause  is  either  of 
the  form  N  ^  B  (initial)  or  of  the  form  □(iV  ^  B) 
(permanent).  The  proof  method  for  TLl  is  based 
on  the  TSLD-resolution  rules  (1)  and  (3)  of  Table  1. 
There  are  several  reasons  that  make  TLl  worth  con¬ 
sidering.  First,  it  is  one  of  the  smallest  extensions 
of  Horn  logic  programming  with  temporal  operators; 
it  was  introduced  in  [AM87]  as  a  first  step  towards 
temporal  logic  programming.  As  we  will  show  in 
the  next  section,  it  has  theoretically  the  same  ex¬ 
pressiveness  as  TEMPLOG,  although  in  practice  TEM¬ 
PLOG  computations  can  be  considerably  more  effi¬ 
cient  than  their  TLl  counterparts.  Moreover,  TLl 
is  one  of  the  few  subsets  of  TEMPLOG  that  is  closed 
under  the  applicable  TSLD-resolution  rules;  on  the 
contrary,  any  proper  subset  of  templog  that  allows 
the  use  of  O  in  the  body  of  clauses  is  not  closed  un¬ 
der  the  TSLD-resolution  rules.  Finally,  TLl  is  equiv¬ 
alent  to  the  “pure”  fragment  of  the  THLP  language® 
introduced  by  Wadge  in  [Wad88]  and  also  referred 
to  as  CHRONOLOG  in  [OW88a].  However,  the  only 
interpretation  method  suggested  for  THLP  consists 
in  reducing  the  programs  to  classical  Horn  programs 
with  explicit  time  parameters  and  interpreting  them 
with  classical  logic  programming  methods.  One  of 
the  drawbacks  of  this  approach  is  that  the  time  pa¬ 
rameter  is  treated  as  any  other  parameter  by  the  logic 
programming  interpreter. 

The  declarative  semantics  of  TLl  can  be  given  in 
model-theoretic  and  in  fixpoint  terms  like  that  of 
TEMPLOG.  One  can  also  establish  the  completeness  of 
the  TSLD-resolution  method  for  TLl.  This  develop¬ 
ment  is  omitted  here  as  it  is  essentially  superseded  by 
the  semantic  development  for  TEMPLOG.  However,  it 
is  interesting  to  note  that  the  proofs  can  be  com¬ 
pletely  carried  out  without  introducing  the  notion 

®THLP  stands  for  Temporal  Horn  Lo^c  Programming. 


of  temporal  groundedness,  and  completeness  can  be 
proved  without  the  need  for  a  temporal  lifting  lemma. 

6  templog’s  Expressiveness 

In  this  section,  we  consider  exclusively  the  proposi¬ 
tional  subset  of  TEMPLOG,  that  is,  the  subset  in  which 
all  predicates  are  0-ary.  This  will  enable  us  to  study 
the  purely  temporal  aspect  of  TEMPLOG ’s  expressive¬ 
ness,  The  fixpoint  formulation  of  TEMPLOG ’s  seman¬ 
tics  suggests  a  relation  to  temporal  fixpoint  calculi 
([BB86],  [Var88]),  Indeed,  propositional  TEMPLOG 
queries  can  be  translated  into  a  fragment  of  the  /iTL 
of  [Var88],  namely  the  positive  fragment  of  ^TL  that 
allows  only  least  fixpoint  operators.  We  give  the  fla¬ 
vor  of  the  translation  between  TEMPLOG  programs 
and  formulas  of  this  fragment  of  /iTL  on  an  example. 

Example  6.1  The  following  two  program  clauses  de¬ 
fine  a  predicate  u  that  holds  whenever  p  holds  an  even 
number  of  time  instants  later. 

□(u  <-p) 

□  («  4—  O  O  ti) 

Notice  that  u  can  be  seen  as  the  result  of  applying 
a  temporal  operator  to  p,  and  that  this  operator  is 
the  dual  of  the  even  operator  shown  in  [Wol83]  to 
be  inexpressible  in  temporal  logic.  The  least-fixpoint 
semantics  of  the  clauses  for  u  can  be  expressed  by 
the  /iTL  formula  pXfpW  OCX).  It  is  the  least 
fixpoint  (with  respect  to  propositional  variable  X)  of 
the  disjunction  of  the  bodies  of  the  clauses  defining  u 
(in  which  u  is  replaced  by  the  variable  X),M 

This  example  shows  that  there  are  properties  express¬ 
ible  in  TEMPLOG  which  are  not  expressible  in  tempo¬ 
ral  logic.  On  the  other  hand,  there  are  formulas  of 
temporal  logic  that  are  not  expressible  in  templog 
since  expressing  all  of  temporal  logic  in  /iTL  can  re¬ 
quire  using  greatest  fixpoints  or  the  alternation  of  a 
greatest  and  a  least  fixpoint  ([Par81]).  In  terms  of 
languages,  /iTL  has  the  expressive  power  of  a;-regular 
expressions  whereas  temporal  logic  has  the  expres¬ 
siveness  of  star-free  a;-regular  expressions  ([Tho81]). 
The  expressiveness  of  TEMPLOG  is  clearly  less  than 
that  of  cj-regular  languages.  On  the  other  hand,  it 
is  incomparable  to  star-free  a;-regular  languages.  We 
will  prove  that  the  expressiveness  of  TEMPLOG  is  es¬ 
sentially  that  of  finitely  regular  ujelanguages.  An  u- 
language  L  is  finitely  regular  if  there  is  a  regular  lan¬ 
guage  U  such  that  each  (infinite)  word  in  L  has  a 
finite  prefix  in  L'. 

Let  us  first  formally  set  up  the  framework  for  study¬ 
ing  the  expressiveness  of  templog  in  terms  of  tj- 
languages.  For  propositional  TEMPLOG,  a  temporal 
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interpretation  consists  of  a  sequence  of  states  isomor¬ 
phic  to  uj  together  with  an  interpretation  function 
giving,  for  each  state,  the  (0-ary)  predicates  true  in 
that  state.  Such  an  interpretation  can  be  seen  as 
an  infinite  word  over  the  alphabet  2^,  where  V  is 
the  set  of  predicates  in  the  language.  Notice  that 
there  is  no  distinction  between  temporal  interpreta¬ 
tions  and  temporal  Herbrand  interpretations  in  the 
propositional  case.  So  we  can  characterize  an  inter¬ 
pretation  by  the  set  of  next-atoms  that  hold  in  it. 
A  finite  prefix  of  an  interpretation  is  a  restriction  of 
the  interpretation  to  a  prefix  of  a;.  Any  finite  set  of 
next-atoms  is  a  finite  prefix  of  an  interpretation. 

To  give  a  meaningful  characterization  of  the  ex¬ 
pressiveness  of  TEMPLOG,  we  consider  sets  P  of  pro¬ 
gram  clauses  that  define  some  predicates  ui, . . . 
in  terms  of  themselves  and  in  terms  of  other  predi¬ 
cates  Pi , . . . ,  Pn  not  defined  in  P.  To  emphasize  the 
fact  that  the  predicates  Pi, . . .  ,Pn  are  not  defined  by 
P,  we  denote  the  program  by  P(pi, . . .  ,Pn).  Each  of 
the  Ui  defined  by  P  corresponds  to  a  temporal  oper¬ 
ator  whose  arguments  are  pi, . . .  ,p„. 

Example  6.2  The  following  program  P(p,  q)  defines 
a  predicate  u  that  holds  exactly  when  pUq  holds,  U 
denoting  the  strong- until  operator. 

□(u  ^  q) 

□(u  p^Ou)  ■ 

The  semantics  of  a  program  P(pi, . . .  ,p,»)  must  nat¬ 
urally  be  a  function  of  the  semantics  of  pi, . . .  ,p„, 
that  is,  of  the  interpretation  of  {pi, . . .  ,Pn}.  Let  us 
view  P(pi , . . . ,  p„)  as  the  top  layer  of  a  two-layer  pro¬ 
gram  whose  bottom  layer  defines  Pi,...,Pn.  More 
precisely,  a  program  is  said  to  be  layered  if  it  can 
be  partitioned  into  sets  of  clauses  (layers)  Pi,,,  .^Pk 
such  that  the  definition  of  each  predicate  is  com¬ 
pletely  contained  within  one  layer  and  for  every  i 
(1  <  2  <  At),  the  predicate  symbols  appearing  in  the 
body  of  the  clauses  in  P,-  are  defined  in  a  layer  Pj 
such  that  I  <  j  <  i.  Two-layer  programs  are  suffi¬ 
cient  for  our  purpose  here.  The  fixpoint  semantics  of 
a  layered  program  can  be  reformulated  in  a  way  that 
reflects  its  layering,  somewhat  like  the  iterated  fix- 
point  semantics  of  the  stratified  programs  of  classical 
logic  ([Min88]). 

Proposition  6.1  Consider  a  two-layer  templog 
program  P  =  Pi,P2  whose  minimal  Herbrand  model 
is  Mp.  Let  Ml  denote  the  minimal  Herbrand  model 
of  Pi.  Let  T2  be  the  mapping  associated  with  P2 
as  defined  in  Section  3.2,  and  let  be  defined  by 
mi)  =  I UT2{I).  Then  Mp  = 


PROOF:  The  proof  is  quite  straightforward.  It  in¬ 
volves  using  the  monotonicity  and  the  continuity  of 
r2  (proved  in  Section  3.2).  ■ 

In  our  case,  we  consider  programs  P(pi,...,Pn) 
whose  bottom  layer  is  arbitrary.  So  we  define 
the  semantics  of  P  in  terms  of  interpretations  of 
{pi,...,Pn}*  Let  Tp  be  the  mapping  associated 
with  the  clauses  in  P  as  defined  in  Section  3.2, 
and  let  Tp(I)  =  /  U  rp(J).  Then  the  semantics  of 
P(pii^--yPn)  with  respect  to  /,  denoted  Mp(I),  is 
given  by  Mp(I)  =  [JZoTp{I). 

This  sets  up  the  framework  for  understanding  how 
programs  characterize  sets  of  words.  The  combina¬ 
tion  of  a  program  P(pi, . . .  ,Pn),  defining  predicates 
ui,.. .  ,Umy  and  a  goal  O*  ui  characterizes  the  col¬ 
lection  of  interpretations  /  of  {pi, . . .  ,p„}  (collection 
of  words  on  2^^^*  such  that  O*  ui  holds  in  the 
semantics  of  P  considered  with  respect  to  /,  that  is, 
such  that  t=Mp(/)  Notice,  however,  that  when 

O*  Ui  holds  in  Mp(I),  there  is  a  finite  prefix  I*  of  I 
such  that  O*  holds  in  M/>(/*). 

This  last  fact  partially  explains  why  the  expressive¬ 
ness  of  TEMPLOG  programs  can  be  characterized  in 
terms  of  finitely  regular  a/-languages.  To  prove  this 
characterization,  we  will  show  how  one  can  build  a 
finite-acceptance  finite  automaton  on  infinite  words 
from  a  TEMPLOG  program  and  a  goal,  as  well  as 
give  the  opposite  construction.  A  finite- acceptance 
automaton  accepts  an  infinite  word  iff  it  accepts  a 
finite  prefix  of  that  word  ([WVS83],  iyW88]).  Ex¬ 
cept  for  the  fact  that  it  is  applied  to  prefixes  of  in¬ 
finite  words,  a  finite  acceptance  automaton  is  iden¬ 
tical  to  a  classical  finite  automaton.  Finite  accep¬ 
tance  automata  thus  characterize  the  finitely  regular 
^-languages.  However,  we  should  note  that  without 
further  assumptions,  the  construction  of  a  TEMPLOG 
program  from  an  automaton  yields  a  program  that 
defines  a  superset  of  the  set  of  interpretations  char¬ 
acterized  by  the  automaton.  The  needed  additional 
assumptions  will  appear  clearly  once  we  have  given 
the  proofs,  and  we  will  discuss  them  below. 

Theorem  6.2  (From  Programs  to  Automata) 
Let  P(pi,...,Pn)  be  a  TEMPLOG  program  defining 
predicates  Ui,...,Uyn.  To  this  program  P(pi ,p„) 
and  any  goal  4—  O*  ui  with  1  <  ^  <  m,  one  can  asso¬ 
ciate  a  finite  automaton  A  such  that  for  every  inter¬ 
pretation  I  of  {pi, . . .  ,pn},  A  accepts  a  finite  prefix 
of  I  if  and  only  if  hAfp(/)  O*  u/. 

PROOF:  This  theorem  is  proved  by  techniques  similar 
to  those  used  in  [Var88],  [WVS83]  and  [VW88].  The 
proof  will  be  given  in  the  full  paper.  I 

Let  us  now  consider  the  other  direction,  that  is,  the 
construction  of  a  TEMPLOG  program  corresponding  to 
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a  finite  automaton.  We  first  give  the  theorem  and  its 
proof.  Notice  that  in  the  statement  of  the  theorem, 
every  sequence  accepted  by  the  automaton  produces 
a  model  of  the  program  that  satisfies  the  goal,  but 
the  converse  does  not  always  hold.  We  will  see  how 
the  correspondence  can  be  made  exact  after  giving 
the  proof. 

Theorem  6.3  (From  Automata  to  Programs) 
Lei  A  be  a  finite  automaton.  There  is  a  templog 
program  P{p\ , . . .  ,Pn)  defining  a  predicate  u  such  that 
for  every  interpretation  I  o/{pi, . .  *,Pn},  if  A  finitely 
accepts  I  then  \=Mp(I) 

PROOF:  Let  A  =  (^,5,p,{so},F),  where  A  = 
{ai,...,a„}  is  the  alphabet,  S  =  {so,si,..  .,sjt}  is 
the  set  of  states,  p  :  S  x  A  2^  is  the  transition 
relation,  sq  is  the  initial  state,  and  F  C  5  is  the  set 
of  final  states.  We  encode  the  automaton’s  alphabet 
with  predicate  symbols.  So  to  each  aj  corresponds  a 
predicate  symbol  pj  {I  <  j  <  n).  We  now  construct  a 
TEMPLOG  program  F(pi, . . .  ,Pn)  defining  a  predicate 
u.  The  program  will  have  to  encode  the  transition 
relation  of  the  automaton.  For  this,  we  introduce 
an  auxiliary  predicate  sj  for  each  state  s^  of  the  au¬ 
tomaton  {0  <  j  <  k).  The  clauses  of  P(pi,...,Pn) 
are  obtained  as  follows. 

•  For  the  initial  state  sq,  we  introduce  in  P  the 
clause 

D(u  ^  So)- 

•  For  every  alphabet  symbol  aj  €  A  and  every 
pair  of  automaton  states  s„,Su,  €  S  such  that 
Su;  €  p(st,,  Oj),  we  introduce  in  P  the  clause 

□(st,  ^Pj,Os^). 

•  For  every  final  state  s^  G  F,  we  introduce  in  P 
the  clause 

D  Sy  . 

To  prove  that  if  A  accepts  I  then  we  es¬ 

tablish  the  following  intermediate  result. 

Let  i  e  w,  j  >  1,  and  Sy  6  S,  IfAs^  has 
an  accepting  run  of  length  at  most  j  over 

then  O*  Sy  G  Tp^{I)f  where  As^  is  the 
automaton  that  is  identical  to  A  except  for 
its  initial  state  which  is  instead  ofso- 

This  lemma  is  proved  by  induction  on  j  .  The  cor¬ 
rectness  of  the  construction  of  P  follows  immediately 
from  the  lemma  (take  St,  to  be  sq).  I 

In  the  construction  of  a  TEMPLOG  program  corre¬ 
sponding  to  a  finite  automaton,  we  had  to  encode  the 


alphabet  of  the  automaton  with  predicate  symbols. 
One  problem  with  the  encoding  we  have  used  is  that 
the  predicate  symbols  are  not  mutually  exclusive:  the 
fact  that  one  of  them  holds  at  a  certain  time  does  not 
prevent  another  one  from  holding  at  that  same  time. 
Let  us  illustrate  this  with  an  example. 

Example  6.3  Suppose  that  we  try  to  encode  in 
TEMPLOG  the  automaton  with  alphabet  {a,  6,  c]  that 
accepts  the  regular  language  (a6)*c.  We  associate 
predicate  symbols  p,  g,  and  r  to  a,  6  and  c,  respec¬ 
tively.  Then  we  construct  the  program  as  described 
in  the  proof  of  Theorem  6.3,  and  obtain  the  following. 

□(«  4—  r) 

□(u  ^p,  Og,00  tx) 

Let  us  consider  the  goal  4—  u.  The  collec¬ 
tion  of  interpretations  I  of  {p,  g,r}  such  that 
Nmp(/)  ^  contains  not  only  the  interpreta¬ 
tions  that  have  a  finite  prefix  h  of  the  form 
{p,Oq,0^p,0^q,...,  p,  q,  r},  but 

also  all  those  that  have  a  finite  prefix  containing  /*, 
like  for  example  the  interpretation  in  which  p  and  q 
are  true  at  every  time  instant  and  r  is  true  at  some 
time  instant.  If  we  could  instead  encode  the  alphabet 
symbols  a,  fr,  c  respectively  with  (-’P  A  -ig),  (p  A  -ig), 
and  ("‘P  A  g),  which  axe  mutually  exclusive  formulas, 
this  problem  would  disappear.  ■ 

Thus  what  is  missing  to  obtain  an  exact  corre¬ 
spondence  between  TEMPLOG  and  finitely  regular  w- 
languages  is  the  possibility  of  allowing  the  predicate 
symbols  Pi , . . . ,  Pn  to  occur  negated  in  the  body  of  the 
clauses  of  a  program  F(pi, . . .  ,Pn)-  This  is  necessary 
for  unambiguously  representing  the  alphabet  of  an 
automaton.  Notice  that  we  do  not  need  to  allow  the 
defined  predicates  «i,...,Um  to  appear  negated  in 
F,  only  the  bottom-layer  predicates.  It  is  straightfor¬ 
ward  to  adapt  our  proofs  to  show  that,  with  this  ex¬ 
tension,  the  correspondence  between  the  expressive¬ 
ness  of  TEMPLOG  and  finitely  regular  w-languages  is 
exact. 

One  could  imagine  extending  TEMPLOG  further  to 
allow  full  stratified  negation,  that  is,  no  predicate  is 
defined  in  terms  of  its  own  negation,  but  can  be  de¬ 
fined  in  terms  of  the  negation  of  the  predicates  de¬ 
fined  in  a  lower  layer.  In  that  case,  the  expressive¬ 
ness  of  the  extended  language  would  be  that  of  the 
w-regular  expressions.  Indeed,  such  a  use  of  negation 
would  make  it  possible  to  obtain  the  alternation  of  a 
greatest  and  a  least  fixpoint  sufficient  to  define  all  w- 
regular  languages.  This  last  result  is  essentially  only 
of  theoretical  interest,  since  the  natural  procedural 
semantics  of  stratified  programs  based  on  the  TSLD- 
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resolution  method  would  not  constitute  a  complete 
proof  system  for  this  extended  language. 

Interestingly,  stratified  programs  were  first  intro¬ 
duced  by  Chandra  and  Harel  in  a  paper  in  which  they 
study  the  expressiveness  of  datalog  queries,  that  is, 
queries  of  Horn  logic  programming  without  function 
symbols,  and  compare  it  with  fixpoint  logic  on  finite 
structures  ([CH85]).  In  this  paper,  they  first  show 
that  DATALOG  queries  are  equivalent  to  a  fragment  of 
fixpoint  logic,  namely,  the  one  in  which  formulas  con¬ 
sist  of  a  least-fixpoint  operator  applied  to  a  positive 
existential  formula.  It  was  hoped  that  extending  DAT¬ 
ALOG  with  stratified  negation  would  extend  the  ex¬ 
pressiveness  of  the  queries  to  that  of  the  full  fixpoint 
logic  on  finite  structures.  However,  Kolaitis  proved  in 
[K0I88]  that  stratified  programs  have  a  strictly  weaker 
expressive  power  than  fixpoint  logic  on  finite  struc¬ 
tures.  So  the  similarity  does  not  carry  over:  although 
adding  stratified  negation  to  TEMPLOG  yields  the  ex¬ 
pressiveness  of  the  temporal  fixpoint  calculus,  adding 
stratified  negation  to  DATALOG  does  not  yield  the  full 
expressiveness  of  fixpoint  logic  on  finite  structures. 

7  Conclusion  and  Related 
Work 

We  have  developed  the  declarative  (logical)  semantics 
of  TEMPLOG  programs  and  expressed  it  in  two  equiv¬ 
alent  ways:  as  a  minimal  temporal  Herbrand  model 
and  as  the  least  fixpoint  of  a  mapping.  We  proved 
a  correspondence  between  the  least  fixpoint  seman¬ 
tics  and  the  existence  of  refutations,  hence  proving 
a  completeness  theorem  for  strictly  ground  formulas. 
From  this  theorem  and  lifting  lemmas,  we  established 
the  completeness  of  TSLD-resolution. 

In  classical  logic,  the  proof  of  the  completeness  of 
resolution  relies  on  the  Herbrand’s  theorem,  which  is 
an  immediate  consequence  of  the  compactness  of  first- 
order  logic  ([Rob65],  [Hil74],  [Lov78]).  Compactness 
can  be  derived  from  the  completeness  of  first-order 
logic  ([End72],  [Lov78]).  First-order  temporal  logic  is 
neither  complete  nor  compact,  so  we  could  not  rely 
a  priori  on  such  results  for  TEMPLOG.  However,  we 
were  able  to  establish  completeness  for  the  subset  of 
temporal  logic  that  constitutes  TEMPLOG.  So,  it  is 
natural  at  this  point  to  wonder  whether  results  such 
as  compactness  and  Herbrand’s  theorem  also  hold  for 
this  subset  of  temporal  logic.  To  derive  compactness, 
we  have  to  begin  by  extending  the  completeness  the¬ 
orem  proved  in  this  paper  to  the  case  of  programs 
that  can  have  infinitely  many  clauses.  This  can  be 
done  without  difficulty.  Then,  compactness  follows 
from  such  a  (stronger)  completeness  theorem,  and  a 


Herbrand-like  theorem  can  be  stated. 

Related  work  on  the  semantics  of  programming 
in  non-classical  logics  includes  that  of  [OW88a]  and 
[OW88b]  which  was  developed  independently.  There, 
Orgun  and  Wadge  study  the  declarative  semantics  of 
“intensional”  (modal)  extensions  of  Horn  clause  pro¬ 
grams.  One  such  extension  that  they  consider  is  the 
THLP  language  we  discussed  in  the  previous  section. 
They  give  declarative  semantics  similar  to  ours,  but 
as  they  do  not  consider  proof  systems  in  conjunc¬ 
tion  with  their  language,  they  have  no  completeness 
results.  Also,  as  far  as  temporal  programming,  their 
results  are  only  given  for  a  language  equivalent  to  our 
TLl.  In  the  conclusions  of  [OW88a]  and  [OW88b],  it 
is  mentioned  that  one  of  their  results,  namely  the 
minimal  model  semantics,  also  holds  for  full  TEM¬ 
PLOG. 

In  [Far86],  Farinas  del  Cerro  defines  a  framework, 
called  MOLOG,  for  programming  in  modal  logics.  This 
framework  is  based  on  resolution  proof  methods  for 
such  logics.  In  a  recent  paper  ([BFH88])  Balbiani 
et  al.  provide  declarative  and  operational  semantics 
for  one  language  in  the  MOLOG  family  and  prove  the 
equivalence  of  these  semantics. 

Gabbay  has  proposed  an  extension  of  classical  logic 
programming  distinct  from  TEMPLOG  ([Gab87]).  His 
TEMPORAL  PROLOG  is  based  on  a  different  subset 
of  temporal  logic:  □  can  only  be  applied  to  entire 
clauses  and  the  only  operators  allowed  in  the  body 
and  in  the  head  of  clauses  are  O  and  the  correspond¬ 
ing  operator  for  the  past.  A  proof  method  is  sketched 
for  this  language,  but  it  is  unclear  how  it  could  be 
used  as  the  basis  of  an  execution  mechanism  and  of 
operational  semantics  for  the  language.  The  only  se¬ 
mantics  defined  for  this  language  is  its  logical  seman¬ 
tics. 

For  temporal  languages  like  Moszkowski’s  tem¬ 
pura  ([Mos86])  and  TOKIO  ([FKTM086]),  which  view 
executing  a  program  as  constructing  a  model  for  the 
program,  the  semantic  issues  are  completely  differ¬ 
ent.  In  fact,  in  the  case  of  TEMPURA  that  impera¬ 
tively  executes  a  temporal  logic  formula,  the  states  of 
the  computation  are  exactly  the  states  of  the  model 
of  the  formula,  and  the  operational  semantics  of  a 
program  corresponds  to  its  logical  semantics.  TOKIO 
extends  PROLOG  with  temporal  constructs  that  are 
interpreted  as  control  features.  To  give  its  formal  se¬ 
mantics  one  would  need  to  combine  a  semantics  of 
temporal  logic  with  a  semantics  of  PROLOG  that  ex¬ 
plicitly  represents  the  execution  mechanism.  Such  a 
semantics  could,  for  instance,  be  based  on  that  of 
[JM84],  [DM88]  or  [Bau88b]. 
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